up:: Start Here
What is encryption, and why does everything depend on it?
Encryption is a mathematical process that scrambles information so only someone holding the right key can read it. It runs constantly and invisibly on every connection you make, and almost nobody notices it working.
That invisibility is why it’s so rarely defended. It’s the closest thing the digital world has to plumbing, and people only think about plumbing when it fails.
The short version:
- Encryption does two separate jobs: it keeps things private, and it proves who someone is.
- The second job is the one people never think about, and it holds up more than the first.
- Take both away and banking, medical records, software updates, and the control systems behind power and water stop working.
- It’s the only protection of its kind that doesn’t require trusting anyone, because it rests on math rather than on a promise.
- Only part of it breaks under a quantum computer, and knowing which part is what keeps you from being misled.
What are the two jobs?
It keeps things private. What you tell a doctor, a lawyer, or a therapist. What sits in your bank account. What you searched for at 3am. Encryption is what makes it possible to say something to one person rather than to everyone.
It proves who someone is. When your phone installs an update, it checks a signature confirming the code came from Apple or Google rather than from an attacker. When your browser opens your bank’s website, it checks a certificate confirming the site really belongs to that bank. Every one of those checks runs on the same mathematics.
The second job is the one that surprises people. Most of us think of encryption as hiding things, and a very large share of what it actually does is proving things.
What stops working without it?
- Banking and card payments, which need an account number sent privately and a merchant confirmed as real.
- Hospital records, which have to stay confidential, and prescription orders, which have to be provably from a doctor.
- Software updates. Your device checks a signature before installing anything. Break that check and anybody can push whatever code they like to millions of phones at once.
- The control systems behind power, water, and transport, which accept commands only from senders they can verify.
- Passports and digital ID, contracts, and every website you’ve ever trusted to be what it claims.
Why is encryption different from other protections?
Because it’s the only one that doesn’t require you to trust anybody.
A privacy law can be repealed. A company policy changes when the company is sold. A promise gets broken, and a terms-of-service page gets rewritten. Encryption holds because the mathematics holds, which is precisely why it protects people whose government, employer, or family doesn’t have their interests at heart.
That property is what makes replacing it a serious matter rather than a technical chore.
What actually happens when you open your banking app?
The clearest way to see which part breaks is to follow one everyday action all the way through. Here’s what happens in the half second after you tap.
Step 1. Your phone has never spoken to this server before. It needs two things before anything else can happen: proof this really is the bank, and a way to keep everything that follows private.
Step 2. The bank proves who it is. The server sends over a small file saying, in effect, this address belongs to this bank. That file is stamped by a company your phone already trusts, and the stamp is a piece of mathematics only that company can produce and anybody can check. Your phone checks it. When that check fails, you get the red warning screen telling you the site may be fake.
Step 3. The two of them agree on a secret number, in public. Your phone and the bank need a secret only the two of them know. They’ve never met, and everything they send travels across networks owned by other people, so they can’t simply mail it to each other.
So they do something that sounds impossible. Each side takes a number it keeps private, combines it with a number the other side published openly, and they both arrive at the same answer. Anybody recording the entire exchange sees both public numbers and still can’t work out the shared answer.
Step 4. Everything after that is scrambled with that secret number. Your password, balance, and transfers all travel under it. This part is fast, and it’s doing the actual hiding.
Now the important part. Steps 2 and 3 are what a quantum computer breaks. Step 4 survives.
Step 4 survives because it relies on a different kind of mathematics, one a quantum computer only dents, and using bigger numbers is enough to fix it.
Steps 2 and 3 are the two jobs from the top of this page: proving who you’re talking to, and agreeing on a secret in public. Those are the parts holding up software updates, website identity, payments, medical records, and the control systems behind power and water.
What are the words for all this?
| Term | What it means |
|---|---|
| Public-key cryptography | The mathematics behind steps 2 and 3. The half that breaks. |
| Key exchange | Step 3. Agreeing on a secret number in public. |
| Digital signature | Step 2. Proof that something came from who it claims. |
| Certificate | The small file in step 2 saying an address belongs to a particular organization. |
| Symmetric encryption | Step 4. The fast scrambling with the shared secret. The half that survives. |
| Post-quantum cryptography | The replacement for the half that breaks. It runs on everyday computers. |
Why can’t someone just guess the secret?
Both steps rest on one idea: some arithmetic is quick to do forwards and close to impossible to undo.
Multiply two large prime numbers together and a computer answers instantly. Hand that same computer only the answer and ask which two primes produced it, and it’ll still be working long after the sun burns out. The number that was easy to make is the one published in public. The pieces that made it are the secret.
That difficulty is the only thing keeping the secret secret. Not a rule, and not a policy. Arithmetic that takes too long to undo.
Which is exactly why a machine that undoes it quickly changes everything. See What’s a quantum computer?
Questions people ask
Is the padlock in my browser this? Yes. The padlock means steps 2 and 3 completed successfully for that connection.
Is “256-bit encryption” the strong kind? That phrase usually refers to step 4, which is the half that survives. Companies quote it often, and it doesn’t address the part in question.
Is my data encrypted when it’s just sitting on a company’s server? Often, and that’s a separate question from this one. The exposure here is about how the keys were agreed while data was moving.
Does a VPN change any of this? No. A VPN changes who can see your traffic locally, and the same steps happen underneath it.
Where to go next
- What’s a quantum computer? covers the machine that undoes step 3.
- What’s actually happening? is the whole story in about 5 minutes.
- Did my phone already fix this? covers what’s already been repaired.
Go deeper into the technical detail
The technical version, written for security professionals, is Foundations MOC.
These open the Post-Quantum Field Guide, a separate site written for security professionals.
Last verified 2026-07-30 · Maintained by Addie LaMarr, LaMarr Labs.